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500 



502 

Q START Y 



LOAD PROGRAMMABLE SMART CARD WITH INFORMATION 
CORRESPONDING TO INDIVIDUAL MEMBERS OF A GROUP, LOAD 
INFORMATION CORRESPONDING TO GROUP INCLUDING AT LEAST 
SOME AGGREGATED INFORMATION ALONG WITH SECURITY/ 
IDENTIFICATION INFORMATION USED TO CONTROL ACCESS TO 
INFORMATION STORED ON CARD 



I 



504 



MONITOR FOR ATTEMPTS TO 
ACCESS STORED DATA 



506 



IN RESPONSE TO AN 
ACCESS ATTEMPT DO: 



IDENTIFY ENTITY ATTEMPTING TO 
ACCESS STORED INFORMATION 



508 



SERVICE 
PROVIDER 



GROUP MEMBER 



DETERMINE TYPE OF 
SERVICE TO BE PROVIDED 



DETERMINE GROUP MEMBER 
TO WHOM SERVICE IS TO BE 
PROVIDED 



DETERMINE LEVEL OF 
ACCESS TO BE PROVIDED TO 
SERVICE PROVIDER ENTITY 
ASA FUNCTION OF 
DETERMINED TYPE OF 
SERVICE AND GROUP 
MEMBER TO WHOM SERVICE 
IS TO BE PROVIDED 




T 518 



GRANT GROUP MEMBER 
(HEAD OF GROUP) ACCESS 
TO AT LEAST A PORTION OF 
THE GROUP INFORMATION 
DATA SET FOR READ AND/ 
OR WRITE PURPOSES 



516 



IDENTIFY GROUP MEMBER 
INFORMATION DATASET 
CORRESPONDING TO GROUP 
MEMBER ACCESSING SMART 
CARD 



FIGURE 5A 
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ex 



534 



GRANT ACCESS TO GROUP INFORMATION 
DATA SET TO EXTENT ACCESS TO GROUP 

LEVEL INFORMATION IS TO BE 
ACCESSABLE WHILE DENYING ACCESS TO 
PORTIONS OF GROUP INFORMATION DATA 
SET WHICH ARE NOT RELEVANT OR 
NECESSARY FOR SERVICE 
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DETERMINE INFORMATION 
WITHIN INDIVIDUAL GROUP 

MEMBER DATA SET THE 
GROUP MEMBER IS 

ALLOWED TO ACCESS 



GRANT ACCESS TO INDIVIDUAL MEMBER 
INFORMATION DATA SET CORRESPONDING 
TO GROUP MEMBER TO WHOM SERVICE IS 

BEING PROVIDED WHILE DENYING 522 
SERVICE PROVIDER ACCESS TO OTHER / 
INDIVIDUAL GROUP MEMBER 
INFORMATION DATA SETS AND TO 
INFORMATION IN ACCESSED INDIVIDUAL'S 
DATA SET WHICH IS NOT NECESSARY FOR 
SERVICE BEING PROVIDED 
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PERFORM READ AND/OR 
WRITE OPERATION ON THE 

DATA SET(S) GROUP 
MEMBER IS AUTHORIZED 
TO ACCESS IN RESPONSE 
TO USER INPUT 



OPERATE SERVICE PROVIDER TO UPDATE 
SERVICE PROVIDER'S DATABASE WITH 
INFORMATION FROM PORTABLE DEVICE 
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OPERATE SERVICE PROVIDER SYSTEM TO 
UPDATE INDIVIDUAL GROUP MEMBER 
INFORMATION AND/OR GROUP 
INFORMATION IN CASE WHERE SERVICE 
PROVIDER HAS WRITE ACCESS 
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Q STOP 



FIGURE 5B 
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